CVE-2022-40685

CWE-522 — Insufficiently Protected Credentials3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.2%

top 55.34%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Data Center Manager

Timeline

PublishedMay 10

Description

Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5intel(r)_dcm_softwarebefore version 5.0.1

▶NVDintel/data_center_manager< 5.0.1

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

CVEList

CVE-2022-40685: Insufficiently protected credentials in the Intel(R) DCM software before version 5↗2023-05-10

▶

GHSA

GHSA-6g65-h88g-gcgr: Insufficiently protected credentials in the Intel(R) DCM software before version 5↗2023-05-10

▶